Re: one can re-sign without a permission to re-sign header

Hector Santos <[email protected]> Fri, 02 May 2014 12:44:07 -0400
Newsgroups gmane.ietf.rfc822
Organization Santronics Software, Inc.
Message-ID <[email protected]>
On 5/2/2014 10:42 AM, John R Levine wrote:

>> I wouldn't bother with what you've proposed.
>
> Neither would I.  Whitelisting solves this problem far better.
>

Assuming you mean a signer domain and/or list domain whitelist, no it 
doesn't John. It doesn't do diddly squat about dealing with protocol 
faults which is what this is all about and always have been for 9 
years John. That can only come from the message anchoring domain -- 
the originating source/author domain.

What if the Signature is missing or invalid?  What if the mf=y tag 
doesn't exist and it was intentionally left out which will be the 
default considerations such this would be an "DKIM Add-on" concept? 
Are you going to continue to forward?


-- 
HLS


_______________________________________________
ietf-822 mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-822